UnitedHealth CEO Confirms Breach Tied to Stolen Credentials, No MFA
Infosecurity Magazine's May 2024 article reports that UnitedHealth CEO Andrew Witty told a House subcommittee that a breach stemmed from stolen credentials and no MFA. Casey Ellis, Bugcrowd's founder, says MFA would likely have prevented the attack chain, since any remote access tool with a leaked credential and no MFA could be the entry point.
Source description, as published
Andrew Witty made the claims in a written testimony submitted before a House subcommittee hearing
Inventors / authors: https://www.infosecurity-magazine.com/profile/alessandro-mascellino/